$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft File: LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft (raw, json) Hash identifier: tnj0DOx5qfKWRS/DXtDL1aU0hgiCUYLDSEY7LZ9RZVM= Subject key identifier: B9:B2:19:96:A5:D4:BA:94:87:56:2C:36:73:00:A1:EF:38:8D:0B:25 Authority key identifier: 2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 Certificate issuer: /CN=A91ABE54/serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Certificate serial: 0432 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft Manifest number: 0427 Signing time: Sun 15 Jun 2025 00:06:09 +0000 Manifest this update: Sun 15 Jun 2025 00:06:08 +0000 Manifest next update: Sun 22 Jun 2025 00:06:08 +0000 Files and hashes: 1: LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl (hash: keq9Tusmp4slQtlMoZ5pzAlQNnHaeFqRNAf1Q38aHgU=) 2: A69224164EAE11EDBF0D8256C4F9AE02.roa (hash: tNJLz/05MhN+kNpDsEpSvyxEjiBHI8/Qy5MZGniM9So=) 3: A60006804EAE11EDBF0D8256C4F9AE02.roa (hash: PeSRHrlXLPWq0OR7M6KoyLAqMUZOAeVzYm1KrZ/ISG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1074 (0x432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABE54, serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Validity Not Before: Jun 15 00:06:08 2025 GMT Not After : Jun 22 00:06:08 2025 GMT Subject: CN=684e0e70-fec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:b3:34:b3:90:56:21:c3:3c:48:3b:55:89:40: 39:b2:f9:3c:a1:70:6b:b1:99:eb:57:37:6f:ce:21: 5d:9a:b2:c7:37:64:79:e1:21:56:52:26:09:24:e5: e9:cf:66:c9:98:dc:f8:ab:04:d5:9e:4f:c5:f4:a3: 6f:6f:84:5b:68:b1:52:19:a9:55:38:1d:d1:87:a8: 35:0e:6d:e2:4c:ae:c4:b3:15:7c:99:e7:61:fb:2e: c1:38:a4:f1:5f:5e:56:d7:69:3a:38:c2:28:65:96: fa:99:01:4c:b5:80:5e:3f:a8:b2:4c:68:c0:d3:73: db:6d:8e:70:85:3e:a2:e9:53:e1:9d:bc:4e:1f:11: 76:91:36:36:1d:0c:d6:3f:2c:5c:3e:ac:0e:17:85: a1:1a:c0:52:8d:38:24:01:12:3f:42:8b:28:f5:28: d8:5a:63:7e:14:b4:46:ad:ff:87:61:da:2e:05:5e: b8:b5:1b:49:1b:95:d0:97:2c:d1:ca:0a:07:4b:31: 2a:93:7c:bd:1c:70:12:ed:af:a2:48:f1:3e:c2:df: 7d:aa:63:b3:0b:fe:9d:30:ef:fc:31:f9:ff:b0:68: 09:29:49:6f:6d:b8:a1:70:3a:30:83:0c:1f:7c:58: ed:81:25:06:9a:08:92:d2:5b:c1:ca:20:5e:1d:10: 51:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B2:19:96:A5:D4:BA:94:87:56:2C:36:73:00:A1:EF:38:8D:0B:25 X509v3 Authority Key Identifier: keyid:2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:40:fb:0e:5b:ed:1d:1f:f8:32:65:8b:cb:1d:9c:f0:2f:02: 8c:b5:ac:9c:93:a5:59:49:66:19:96:da:b6:23:d7:d4:83:d7: 95:10:38:3a:ea:c5:09:1b:c9:e4:03:80:5c:fe:62:2f:1d:a7: 6c:62:a6:30:f1:59:03:fd:01:5c:9d:bd:e2:e3:61:24:0c:e7: 99:ba:59:eb:78:af:77:ad:49:40:91:5d:d1:88:bc:f6:b5:4b: 6b:aa:de:96:9d:78:9e:c4:37:99:17:4d:bf:d6:af:21:3a:87: e6:a4:b8:67:92:63:55:7e:1d:6e:fa:c9:7c:35:10:91:c0:98: 07:59:38:3c:e3:f3:c5:89:16:19:6b:c2:a1:14:6a:da:e9:32: 3f:ac:75:62:c4:18:ca:6d:0c:8b:75:a5:bb:a3:1b:90:b6:f7: ad:62:b0:aa:75:4c:d2:63:42:8b:d8:7b:d4:79:58:56:96:1a: 51:ee:64:6f:3f:11:ba:5b:ec:bc:db:93:ed:67:2c:08:1f:c4: 24:5a:04:d9:12:a9:d1:99:82:09:b7:a7:b8:8b:d0:b8:a9:67: 80:f6:63:d7:0d:90:b0:e5:35:22:93:c2:ef:e8:2c:eb:70:bb: c0:69:3c:3d:79:24:9a:eb:79:23:6f:d3:5f:e4:a4:3b:e0:05: 3e:5f:0e:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJFNTQxMTAvBgNVBAUTKDJEN0NFOTRGMTNEODJFNTRGODM0MjNDNjFFQjk2MzNB Rjk0MDU5MjQwHhcNMjUwNjE1MDAwNjA4WhcNMjUwNjIyMDAwNjA4WjAYMRYwFAYD VQQDEw02ODRlMGU3MC1mZWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+rM0s5BWIcM8SDtViUA5svk8oXBrsZnrVzdvziFdmrLHN2R54SFWUiYJJOXp z2bJmNz4qwTVnk/F9KNvb4RbaLFSGalVOB3Rh6g1Dm3iTK7EsxV8medh+y7BOKTx X15W12k6OMIoZZb6mQFMtYBeP6iyTGjA03PbbY5whT6i6VPhnbxOHxF2kTY2HQzW PyxcPqwOF4WhGsBSjTgkARI/Qoso9SjYWmN+FLRGrf+HYdouBV64tRtJG5XQlyzR ygoHSzEqk3y9HHAS7a+iSPE+wt99qmOzC/6dMO/8Mfn/sGgJKUlvbbihcDowgwwf fFjtgSUGmgiS0lvByiBeHRBR9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmyGZal 1LqUh1YsNnMAoe84jQslMB8GA1UdIwQYMBaAFC186U8T2C5U+DQjxh65Yzr5QFkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkU1NC9BNUMxNTBBQzY4 RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxsVDROQ1BHSHJsak92bEFX U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYenBUeFBZTGxUNE5DUEdIcmxqT3ZsQVdTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkU1NC9BNUMxNTBBQzY4RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxs VDROQ1BHSHJsak92bEFXU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARQPsOW+0dH/gyZYvLHZzwLwKMtayck6VZSWYZltq2I9fUg9eVEDg6 6sUJG8nkA4Bc/mIvHadsYqYw8VkD/QFcnb3i42EkDOeZulnreK93rUlAkV3RiLz2 tUtrqt6WnXiexDeZF02/1q8hOofmpLhnkmNVfh1u+sl8NRCRwJgHWTg84/PFiRYZ a8KhFGra6TI/rHVixBjKbQyLdaW7oxuQtvetYrCqdUzSY0KL2HvUeVhWlhpR7mRv PxG6W+y825PtZywIH8QkWgTZEqnRmYIJt6e4i9C4qWeA9mPXDZCw5TUik8Lv6Czr cLvAaTw9eSSa63kjb9Nf5KQ74AU+Xw5O -----END CERTIFICATE-----Generated at Sun Jun 15 10:10:22 2025 by rpki-client